conv.

← The whole story
Security
Researcher exposes AT Protocol users' unexpectedly public data

Researcher documents widespread unintended data exposure on AT Protocol

1 Oct 30 · 12d ago · 1 post · 1 source · development 1 of 2

Security researcher Melanie Kat published findings showing that user data on AT Protocol—which powers Bluesky—is far more publicly accessible than most users likely understand. By querying public relays and using tools like PDSls.dev, Kat discovered she could access 1,300+ RSS feed subscriptions, private paywalled feeds, and sensitive content from AT Protocol apps with no authentication or restrictions.

“I've found is a bunch of private data I'm not sure people know is public. Not only public, it's easy to find.”

Melanie Kat

Melanie Kat Security researcherBluesky / AT Protocol Social network and protocol

The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump

Peak 12 pieces in 3h at Oct 30, 6 AM; 43 pieces over 13 days (2 articles · 6 posts · 35 comments) Oct 30, 6 AM — 12 pieces · 1 post · 11 comments — Lobsters 12Oct 30, 9 AM — 4 pieces · 1 article · 2 posts · 1 comment — Hacker News 1, Lobsters 1, Mastodon 1, +1 moreOct 30, 12 PM — 2 pieces · 2 comments — Lobsters 2Oct 30, 3 PM — 1 piece · 1 comment — Lobsters 1Oct 30, 6 PM — 6 pieces · 1 article · 2 posts · 3 comments — Lobsters 3, Hacker News 1, Mastodon 1, +1 moreOct 30, 9 PM — 7 pieces · 7 comments — Lobsters 7Oct 31, 12 AM — 3 pieces · 1 post · 2 comments — Lobsters 2, Hacker News 1Oct 31, 3 AM — 1 piece · 1 comment — Lobsters 1Oct 31, 6 AM — 1 piece · 1 comment — Lobsters 1Oct 31, 9 AM — 2 pieces · 2 comments — Lobsters 2Oct 31, 12 PM — 2 pieces · 2 comments — Lobsters 2Oct 31, 3 PM — 1 piece · 1 comment — Lobsters 1Oct 31, 6 PM — quietOct 31, 9 PM — quietNov 1, 12 AM — quietNov 1, 2 AM — quietNov 1, 5 AM — quietNov 1, 8 AM — 1 piece · 1 comment — Lobsters 1Nov 1, 11 AM — quietNov 1, 2 PM — quietNov 1, 5 PM — quietNov 1, 8 PM — quietNov 1, 11 PM — quietNov 2, 2 AM — quietNov 2, 5 AM — quietNov 2, 8 AM — quietNov 2, 11 AM — quietNov 2, 2 PM — quietNov 2, 5 PM — quietNov 2, 8 PM — quietNov 2, 11 PM — quietNov 3, 2 AM — quietNov 3, 5 AM — quietNov 3, 8 AM — quietNov 3, 11 AM — quietNov 3, 2 PM — quietNov 3, 5 PM — quietNov 3, 8 PM — quietNov 3, 11 PM — quietNov 4, 2 AM — quietNov 4, 5 AM — quietNov 4, 8 AM — quietNov 4, 11 AM — quietNov 4, 2 PM — quietNov 4, 5 PM — quietNov 4, 8 PM — quietNov 4, 11 PM — quietNov 5, 2 AM — quietNov 5, 5 AM — quietNov 5, 8 AM — quietNov 5, 11 AM — quietNov 5, 2 PM — quietNov 5, 5 PM — quietNov 5, 8 PM — quietNov 5, 11 PM — quietNov 6, 2 AM — quietNov 6, 5 AM — quietNov 6, 8 AM — quietNov 6, 11 AM — quietNov 6, 2 PM — quietNov 6, 5 PM — quietNov 6, 8 PM — quietNov 6, 11 PM — quietNov 7, 2 AM — quietNov 7, 5 AM — quietNov 7, 8 AM — quietNov 7, 11 AM — quietNov 7, 2 PM — quietNov 7, 5 PM — quietNov 7, 8 PM — quietNov 7, 11 PM — quietNov 8, 2 AM — quietNov 8, 5 AM — quietNov 8, 8 AM — quietNov 8, 11 AM — quietNov 8, 2 PM — quietNov 8, 5 PM — quietNov 8, 8 PM — quietNov 8, 11 PM — quietNov 9, 2 AM — quietNov 9, 5 AM — quietNov 9, 8 AM — quietNov 9, 11 AM — quietNov 9, 2 PM — quietNov 9, 5 PM — quietNov 9, 8 PM — quietNov 9, 11 PM — quietYesterday, 2 AM — quietYesterday, 5 AM — quietYesterday, 8 AM — quietYesterday, 11 AM — quietYesterday, 2 PM — quietYesterday, 5 PM — quietYesterday, 8 PM — quietYesterday, 11 PM — quietToday, 2 AM — quietToday, 5 AM — quietToday, 8 AM — quietToday, 11 AM — quietToday, 2 PM — quietToday, 5 PM — quietToday, 8 PM — quiet 1–2
1–2Researcher documents widespread…
Oct 31Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9yesterdaynow · 9:50 PM ET

All 2 developments of Researcher exposes AT Protocol users' unexpectedly public… →

LobstersHacker NewsMastodonNewswires